---
typeId: req
recordId: benac-key-002
fields:
  title: Private keys do not replicate by default
  statement: Private keys shall not replicate by default through Couch/Pouch
    replication, package export, package bundle export, storage upload, or
    package import.
  rationale: Replication and storage should not spread signing authority.
  verification: Export, replication, and storage tests confirm private key
    material is excluded unless explicitly encrypted and exported by local
    policy.
  testable: true
  status: draft
  area: BENAC-KEY
  sourceDocument: /home/johnb/Downloads/benac_syrs_v0_4_integrated_authentication.md
  sourceVersion: v0.4
  sourceSections:
    - 10.1 Cryptographic identity, content identity, and provenance foundation
  order: 14
---
